Legal
Privacy Policy
How passwhy collects, processes and protects personal data across our marketing site and credential platform.
Last updated: June 2026
Overview
passwhy processes account information, usage metadata and encrypted vault content to deliver the service. Credential plaintext is encrypted; we minimize operator access by design.
Data we process
- Account and workspace metadata (name, email, organization, role assignments)
- Encrypted vault content (credentials, secrets, notes and recovery keys)
- Activity and audit logs (reveal, copy, create, update and access decisions)
- Marketing site usage when you consent to analytics cookies
How we use data
We use personal data to provide and secure the platform, support customers, meet legal obligations and improve our products. We do not sell personal data.
Your rights
Depending on your location, you may have rights to access, correct, delete or restrict processing of your personal data. Business and partner customers may request DPAs and subprocessor details for GDPR-aligned programs.
Cookies
For cookie categories and preference controls, see our Cookie Policy.
Contact
Privacy questions: privacy@passwhy.local